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We analyze quantum computers which perform Shor's factoring algorithm, paying attention to 
asymptotic properties as the number L of qubits is increased. Using numerical simulations and a 
general theory of the stabilities of many-body quantum states, we show the following; Anomalously 
fluctuating states (AFSs), which have anomalously large fluctuations of additive operators, appear 
in various stages of the computation. For large L, they decohere at anomalously great rates by weak 
noises that simulate noises in real systems. Decoherence of some of the AFSs is fatal to the results 
of the computation, whereas decoherence of some of the other AFSs does not have strong influence 
, on the results of the computation. When such a crucial AFS decoheres, the probability of getting 

• the correct computational result is reduced approximately proportional to . The reduction thus 

' becomes anomalously large with increasing L, even when the coupling constant to the noise is rather 

, small. Therefore, quantum computations should be improved in such a way that all AFSs appearing 

^ . in the algorithms do not decohere at such great rates in the existing noises. 

D ! 

\ PACS numbers: 03.67.Lx, 03.67.Pp, 03.65.Yz 
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> . I. INTRODUCTION 

in . 

■ Quantum computers are considered to be more efficient than classical computers in solving certain problems P, 0, 
00 i I^IJI- Since the efficiency of computation becomes relevant only when the size N of the input is huge, the efficiency is 

. defined in terms of the asymptotic behavior of the number Q of the computational steps as the size N of the input is 
' increased. To study the asymptotic behavior, one must take the data size large but finite. Since larger N generally 
, requires a larger number L of qubits as L '--^ logA'^, L of a relevant quantum computer becomes large but finite. 
' Therefore, a relevant quantum computer is a many-body quantum system with large but finite degrees of freedom, 
Ph! 1 <C i < +0O. 

■ In the conventional many-body physics, one is usually interested in states that approach as L — > cxd a "vacuum" 
Ch \ state and finite excitations on it. This means that one is usually uninterested in other states of finite systems. In 
^ . a quantum computer, on the other hand, various states are generated according to the algorithm and the input. 

It is therefore expected that some of them would be very different from states that are treated in the conventional 
many-body physics. It is very interesting to reveal physical properties of such "anomalous" states as well as their 
roles in quantum computations. 

For quantum states of general systems with large but finite degrees of freedom, Shimizu and Miyadera (SM) 
; ^ ' recently studied the stabilities against weak noises, against weak perturbations from environments, and against local 
I measurements By fully utilizing the locality of the theory, they obtained the general and universal results: the 
stabilities of quantum states are determined by long-distance correlations between local operators. As measures of 
the long-range correlations of quantum states, SM employed the "cluster property," which plays a fundamental role in 
field theory 6J, and the "fluctuations of additive operators," which will be explained in the following section. If a pure 
state has anomalously large fluctuation of an additive operator(s), then the state has a long-distance correlation(s). 
Such a state does not have the cluster property, and is quite anomalous in many-body physics. Such anomalies are 
directly related to the stabilities of the quantum states. 

Since the stability of quantum states against noises has been considered as a key to realizing quantum computers 
0,0,13 1 it is interesting to apply the general theory by SM to quantum computers. In this paper, we analyze quantum 
computers performing Shor's factoring algorithm [1,1^^ using the general theory by SM and numerical simulations. 
We show that anomalous states, which have anomalously large fluctuations of additive operators, appear during the 
computation. For large L, they decohere at anomalously great rates in the presence of long-wavelength noises, while 
for small L the decoherence rates are of the same order of magnitude as those of normal states. The decoherence of 
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some of the anomalous states, not all of them, results in the reduction of the success probability of the computation. 
Therefore, the decoherence of such anomalous states is crucial to Shor's factoring algorithm with huge inputs. 



II. SUMMARY OF THE GENERAL THEORY OF THE DECOHERENCE RATES OF QUANTUM 
STATES IN SYSTEMS OF LARGE BUT FINITE DEGREES OF FREEDOM 

SM studied stabilities of quantum states of general systems of large but finite degrees of freedom. Among three 
kinds of stabilities discussed by them, we focus on the stability against weak classical noises; namely, we focus on the 
decoherence due to weak classical noises. 

As compared with general many-body systems, quantum computers are often assumed to have the following special 
properties (although they are not necessary): (a) The system Hamiltonian is assumed to be negligible, so that quantum 
states of a quantum computer do not evolve unless the computer is subjected to external operations and/or noises, 
(b) Qubits are assumed to be located on a one-dimensional lattice. In this section, we summarize the result of SM 
for the decoherence rate T, assuming these special properties. 



A. Normalized additive operator 

We consider a quantum computer that is composed of L (3> 1) qubits which are located on sites of a one-dimensional 
lattice with a unit lattice constant. Let a{£) be a local operator at site i (— 1,2, ■ ■ ■ , L), which for qubit systems is a 
polynomial of the Pauli operators cTxi^), d'y{£), ctz{(), acting on the qubit at £. Such a polynomial becomes a linear 
combination of the identity operator l(^) and (Jx{f-), (^zi^-) because of the SU(2) algebra. We define a normalized 

additive operator A by 

e=i 

which is the normalized one of the "additive operator" defined in Ref. For example, if we take 

aii)^{-lYazie), (2) 

then A is the z component of the "staggered magnetization," which has a finite expectation value when the system 
has an antiferromagnetic order. 

Note that normalized additive operators are macroscopic operators. Thermodynamics assumes that fluctuations of 
any macroscopic observables are o{V'^) for pure phases |5|, where V is the volume of the system. However, this is not 
necessarily satisfied by pure quantum states of finite macroscopic systems |^ 0, 0, , as will be described in the 
following. 



B. L dependence of quantum states 

In order to discuss L dependences of properties of quantum states, some rule is necessary that defines L dependence 
of quantum states. The simplest one of such a rule is that the quantum states are homogeneously extended with 
increasing L. For example, consider a superposition of two Neel states, 

_L|ioio...lO) + -^|0101-..01), (3) 

where |1) and |0) denote the spin-up and -down states, respectively. To increase L of this state, one can simply add two 
spins as -^jlOlO • • • 1010) + ^|G1G1 • • • 0101). Unfortunately, states in quantum computers do not have such simple 

homogeneity. However, they are homogeneous in a broad sense because states with a larger L (which is necessary 
for a larger input N) and states with a smaller L are both generated according to the same algorithm. As a result, 
both of them have similar structures, as will be demonstrated explicitly in Sec. IV Dl This allows us to analyze the 
asymptotic behaviors of properties of states in quantum computers as N —^ oo. 
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C. Normally and anomalously fluctuating states 

As a measure of correlations between distant qubits for a system of many qubits, SM proposed the use of 
fluctuations of additive operators. We here summarize their proposal in terms of normalized additive operators. 
Consider a pure state \ip), and put 

Ai = i- (V'lilV')- (4) 

We focus on the L dependence of the fluctuation {ip\{AA)'^\ip) for L ^ 1, and define an index p by 

mAA)^\^)^0{LP-^). (5) 

The value of p depends on both A and j?/"). For example, if the correlation between a{i) and &{£') for large \£ — l'\ is 
negligibly small for j^/j), then p = 1 for the normalized additive operator A which is composed of a{£) as Eq. 

For a given \ip), if the maximum value of p (among those of all normalized additive operators) is unity, is called 
a normally fluctuating state (NFS). It is easy to show that any separable state is a NFS. Note however that the inverse 
is not necessarily true. For example, |100 • • • 0), |010 • • • 0), • • • , |000 • • • 1) are all separable states, hence are NFSs. 
Their superposition 

^ [|100-- - 0) + |010-- - 0) + |001- --O) + • •• + |000 - ••1)] = |W) (6) 

is also a NFS because p = 1 + o{L)/L, but non separable. 

On the other hand, if there is a normalized additive operator(s) A for which p = 2, then the pure state is called 
an anomalously fluctuating state (AFS) because the fluctuation of A is anomalously large. In this case, a{£) and a{£'), 
which compose A, are strongly correlated even when — ^ L. Since AFSs are pure states, this indicates that AFSs 
are entangled macroscopically . This entanglement is macroscopic because one cannot turn a NFS into an AFS by 
adding a small (~ L") number of Bell pairs. Note, in particular, that the state |W) of Eq. © is entangled, but not 
macroscopically entangled, hence is not an AFS but a NFS. In this way, the value of p can be taken as a quantitative 
measure of macroscopic entanglement. 

A simple example of an AFS is the state of Eq. (jS)), for which {iIj\{AA)'^\iIj) — 1 for the staggered magnetization 
defined by Eqs. ^ and Another simple example of an AFS is 

_L|000--.0) + -i=|lll...l>^|C), (7) 

for which the fiuctuation of the "magnetization" = J2e'^z(£) is anomalously large; (C|(AM2)^|C) = 1. 

From the viewpoints of many-body physics and experiments, the index p seems a natural measure of macroscopic 
entanglement. In ferromagnets, for example, |C) is quite anomalous because it is a superposition of two states that 
have different values of the macroscopic variable M^. Such a state is usually discarded in many-body physics for 
many reasons. One reason is that it is very hard to generate such a state experimentally. Another reason is that 
such a state is not allowed as a pure state in the limit of infinite degrees of freedom, L — > oo |^ . On the other hand, 
|W) is a normal state which can easily be generated experimentally, although it is sometimes classified as a strongly 
entangled state in quantum information theory. In insulating solids, for example, the state vector of a many-body 
state in which a Frenkel exciton is excited on the ground state takes the form of |W); namely, in many-body physics 
|W) is just an ordinary state in which a single quasiparticle is excited on the ground state. Since many-body physics 
is directly related to (and has been tested by) experiments, a normal (abnormal) state in many-body physics is also a 
normal (abnormal) state in experiments. Therefore, our measure of macroscopic entanglement seems natural from the 
viewpoints of many-body physics and experiments. Considering that quantum computers should be fabricated from 
real materials, this indicates also that our measure would be suitable for discussing realization of quantum computers. 
Furthermore, an efficient method of computing p for general states has been developed in Ref. Il3|, whereas some of 
the other measures are hard to compute for general states. This is also an advantage of the present measure [l^ . 

Although states with 1 < p < 2 are possible we focus on two classes of states, NFSs {p ~ I) and AFSs {p = 2), 
in this paper. 



D. Decoherence rate 



We consider the decoherence rate F of states of quantum computers. F or the o rigin of the decoherence, we assume a 
weak classical noise f{i, t), acting on every site £, with vanishing average f{£, t) = 0. The case of a weak perturbation 
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from the environment can be treated in a similar manner. We assume that f{£,t)f{£',t') [= f{£',t')f{£,t)] depends 
only on \£ — £'\ and |t — We denote the spectral intensity of f{£, t) by g{k,uj), which is non-negative by definition. 
Here, k takes discrete values from — tt to tt with separation 2-k/L whereas lu takes continuous values. The 
autocorrelation function can be expressed as 

f{£,t)f{£',t') = Yl J ^5(A:,^)e''=(^-^')~-(*-*'). (8) 

k 

Since physical interactions must be local, the interaction between the qubit system and the noise should be the sum 
of local interactions: 

L 

Hint{t)^Xj2f{£,m£), (9) 
e=i 

where A is a positive constant and a{£) is a local operator at site £. Since increasing A is equivalent to increasing the 
amplitude of the noise, A may be interpreted as the noise amplitude times the coupling constant. We shall therefore 
take / to have a normalized amplitude, as Eq. (|39|l . and vary the noise amplitude by varying A. 

Assuming this local interaction and a short correlation time for the noise, SM showed that for L ^ 1 the decoherence 
rate F of a pure state is directly related to fluctuations of additive operators. In terms of normalized additive 
operators, their formula reads 

T^X'L^Y.9ik){mAiAA,\,p). (10) 
Here, g{k) is an average value of g{k,uj) ^ and = Ak — {i}}\Ak\ip), where 

A^^^Y.a{£)e-^^'. (11) 

£=1 

For quantum computers, g{k) ~ g(k,0) because the system Hamiltonian is negligible. Note that Ak is a normalized 
additive operators, where a{£)e~'^^^ of Eq. 1)111) corresponds to a{£) of Eq. Hence, formula (|10|l shows that F of 
a pure state of a quantum computer is determined by the fluctuation of a normalized additive operator that is 
composed of the local operators in 7?int ■ Note that the formula of a pioneering work by Palma et al. is a special 
case of the above general formula. 



E. Fragility 

We say that a quantum state is "fragile" if its decoherence rate F is anomalously great in such a way that 

V^KL^+^, (12) 

where X is a function of microscopic parameters, such as A, and 5 is a positive constant. This is an anomalous 
situation in which the decoherence rate per qubit, T/L ^ KL^, grows with increasing L. For a nonfragile state (for 
which S = 0), in contrast, T/L ^ K is independent of L, in consistency with the naive expectation. This is a normal 
situation in which the total decoherence rate F is simply the sum of local decoherence rates. 

For large L, fragile quantum states decohere much faster than nonfragile states because F becomes anomalously 
great, even when the coupling constant between the system and the noise is small. 



F. Non fragility of all NFSs and fragility of some AFSs 

When is a NFS, {^\AAlAAk\ip) < 0{l/L) for any ife, hence 

F<A^0(L)^5(fc). (13) 



Since J^kdi^) ~ I /(^^j 0)^^ does not depend on L, we find that NFSs never become fragile under weak 

perturbations from any random noises . 
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When is an AFS, on the other hand, (V'l AAJ, AAfejV') = 0(-L°) for some A^, i.e., for some local operator a{x) 
and some wave number k = ko. Hence, if -ffint has a term that is composed of such a(x)'s, then 

T^X'0{L')g{k,) + X^O{L) ^ g{k). (14) 

fc(#fco) 

In this case, the AFS becomes fragile if g{ko) = 0{L~^^^), where S > 0; namely, for an AFS, there can exist 
weak classical noises or weak perturbations from environments that make the AFS fragile. Whether such a noise or 
environment really exists in a quantum computer system depends on physical situations. 

Although SM also considered a more fundamental instability of AFSs (i.e., instability against local measurements), 
the fragility is sufficient for the purpose of the present paper. 



III. CONJECTURES ON QUANTUM COMPUTERS 



From the general results summarized in the preceding section, we are led to the following conjectures on quantum 
computers |,34j. 



A. Quantum computers should utilize AFSs 



Entanglement has been considered to be essential to efficient quantum computations 0, 0, 0, S Oi ^| ■ To discuss 
the efficiency of computation, one must study the asymptotic behavior of the computational time as A'^ — > oo. It 
is natural to consider that more entanglement is required for larger N. Since AFSs are entangled macroscopically, 
we are led to the following conjecture, which we call conjecture (i): In performing an algorithm that is much more 
efficient than any classical algorithms, a quantum computer should utilize AFSs in some stages of the computation. 

Although the use of entanglement in quantum computations was somehow confirmed in the previous works [T^ Il8j | , 
the magnitude of entanglement for large L can be defined in various ways. As a quantitative measure of entanglement, 
we propose here to use the asymptotic behavior, Eq. (O, of fluctuations of normalized additive operators. This enables 
us not only to identify macroscopically entangled states for large L, but also to estimate their decoherence rates using 
formulas (UUJ), (O, and lfTI|l . 



B. Some of AFSs appearing during quantum computation would be fragile 



If conjecture (i) is the case, the results of Sec. Ill Fl lead us to the second conjecture, which we call conjecture (ii): 
Some of the AFSs appearing during quantum computation would be fragile under realistic weak classical noises or 
weak perturbations from environments. 

For example, suppose that electromagnetic noises at 4 K is the dominant noise. If the physical dimension of a 
quantum computer is less than 1 cm, then g{k) of the electromagnetic noises behaves as follows [T^ : 

9W - <y 0{l/L) (A:» 27r/L). ^^^^ 

Therefore, according to Eq. (|14|) . AFSs with k^ = becomes fragile (with S = 1), whereas AFSs with ko ^ 27r/L are 
nonfragile; namely, if AFSs with fco = appear during the computation, they are fragile in electromagnetic noises at 
4 K. 



C. Fragility of some AFSs should be fatal to quantum computation 



If a fragile AFS is used in the quantum computation, it decoheres at an anomalously great rate as given by Eq. I|12|) 
with S > 0. Since quantum coherence is considered to be important in quantum computations, we are further led to 
the third conjecture, which we call conjecture (in): The anomalously fast decoherence of such a fragile AFS(s) should 
be fatal to a quantum computation, and the quantum computation would become impossible for large L even if the 
cou pling constant between the system and the noise or environment is small, unless error correcting codes (ECC) 
IllM|2i'2^ and/or a decoherence-free subspace (DFS) |23|,|2j,l^ 

were successfully used. Since such efficient ECC 
and/or a DFS against all existing noises would not be easy to realize (see Sec. IVIII E|l . improvements of the algorithm 
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seem necessary; namely, if possible, one should implement the algorithm in such a way that only AFSs that are not 
fragile in existing noises are used. 

In this paper, we study these conjectures by analyzing quantum computers performing Shor's factoring algorithm. 



IV. QUICK SUMMARY OF SHOR'S FACTORING ALGORITHM 

To study the conjectures raised in the preceding section, we perform numerical simulations on Shor's factoring 
algorithm 0, which is believed to be much (exponentially) faster than any classical algorithms. In order to 
establish notations, we summarize in this section the main part, which we will simulate, of the algorithm. 

In order to factor an integer N, we use two quantum registers i?i and i?2, which are called the first and second 
registers, respectively. They are composed of Li and L2 qubits, respectively, where 

21og7V < Li < 21ogiV+ 1, (16) 
\ogN < L2 <\ogN + 1. (17) 

Here, log denotes log2. The total number of qubits is Li + L2 = L. The state of each qubit is described by a vector 
of a Hilbert space spanned by two basis states, |0) and |1). As a computational basis of register Rk, we take the set 
of the tensor products of the basis states of Lk qubits; 

|ai,a2,---,aij« EE |a)W. (18) 

Here = or 1 (^ l,2,---,Lfc) and a = Efcia^2'^"\ for example, |0)(i) = |00---0)(i\ |l)(i) = |10---0)(i), and 
|2^i — 1)^^^ = |11 • • • 1)^^^ The initial state is taken as the following separable state; 

|0)«|1)(2) EE IV-init). (19) 

First, the Hadamard transformation is performed by successive unitary transformations on individual qubits of 
yielding 

2^1-1 



^ |a)W|l)(2)^|^HT). (20) 



^ ^ a=0 

Then, we take randomly an integer x (x < iV) that is coprime to N (26j . and perform the modular exponentiation by 
successive pairwise unitary transformations, yielding 

2^1-1 

^= V |a)(i)|x'^ mod iV)(2) = I^me). (21) 

V ^ a=0 

Finally, the discrete Fourier transformation (DFT) is performed by successive pairwise unitary transformations, yield- 
ing 



9^1 —1 9^1 —1 - , 

2l7 E E ^)^'^ ^ (22) 



a=0 c=0 

Here, c is the number that is obtained by reading the bits of c in the reversed order 0]. This completes the main 
part of Shor's factoring algorithm, and no more quantum computation is necessary. Since one can read c reversely, 

the final state ji/'finai) is practically equivalent to So=o~^ Sc=o~^ ^^P [f^*-"] |c)^^^|x° mod N)^^\ 
The amplitude of IV'finai) has dominant peaks at basis states |c)^^^ satisfying 

- ^ < cr mod 2^' < ^, (23) 

where r (< N) is the "order" of x mod A'' 0,13. By performing a measurement that diagonalizes the computational 
basis {|c)(i)} of one can obtain a value of c satisfying inequality (|23|l with the probability greater than 4/7r . 
When such an integer c is obtained, one can find uniquely for each c, using the continued fraction expansion of c/2^i, 
a fraction c'/r that satisfies 
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where c' is an integer. If c' happens to be coprime to r, one can know the value of r. In other cases, where c' is not 
coprime to r or c does not satisfy inequahty (|23|l . one would obtain wrong results for r or could not obtain c' satisfying 
inequality H24|l . Whether the obtained value of r is correct or not can be checked easily by calculating x*" mod N 
using a classical computer. When the correct value of r is not obtained, one can perform the algorithm again. It is 
known that one can successfully obtain the correct value by repeating the algorithm 0(log A^) times. When r is thus 
obtained, one can know a factor of N with the probability greater than 1/2. Therefore, one can factor N efficiently 
by repeating the algorithm. 



V. NUMERICAL SIMULATION WITHOUT NOISE 



In order to study conjecture (i), we perform numerical simulations without noise in this section. 



A. Simplification and the number of computational steps 

The process of the modular exponentiation IV'ht) — * IV'me) costs 0{L\) steps |^|^. Since it will turn out that 
Ri takes a major role, we simplify operations on i?2 in our numerical simulations; namely, we represent the process 
IV'ht) IV'me) as the product of Li controlled unitary transformations f7°*^ = 1, 2, • • • , Li), which is described 
in Box 5.2 of Ref. Since {/"^^ ^^^^ decomposed into 0{L\) pairwise unitary transformations, the states 
appearing during the modular exponentiation in our simulations correspond to Li representative states out of 0{L\) 
states. As a result of this simplification, the total number Q of computational steps, from IV'init) to |V-'finai), in our 
simulation becomes 

g = 2Li + ^^i^^|±ll. (25) 

Here, Li comes from the Hadamard transformation and another Li from the modular exponentiation, whereas Li{Li + 
l)/2 comes from the discrete Fourier transformation. This Q is smaller than 0{Li) steps of a real computation because 
of the above simplification. 

We denote the time interval between subsequent computational steps by r. Although r depends on the hardware of 
the quantum computer, this dependence does not matter in the following discussions because we are only interested 
in the N dependence, which is the only crucial factor in discussing the exponential speedup. The total computational 
time, starting from IV'init) and ending with the measurement of |'0finai): is given by 

Ttotal - (Q + 1)t. (26) 



B. Choice of normalized additive operators 

To judge that a quantum state is not an AFS, fluctuations of all normalized additive operators have to be investi- 
gated. On the other hand, to judge that a state is an AFS, it is sufficient to find out one normalized additive operator 
A for which (AA^) — 0{LP). In order to confirm conjecture (i), it is therefore sufficient to find out one A for which 
a quantum state(s) appearing in the computational process has an anomalously large fluctuation, {/S.A^) = 0{LP). 

As normalized additive operators, we here consider the "magnetization" in three directions a — x,y, z, for the total 
and the individual registers, which are deflned by 



M» = j J2 (27) 



L 



and 



respectively. The maximum value of ((AAfc,)^) is unity, which is taken, e.g., by the following AFS: 

^|0)(i)|0)(2) + ^|2^i - l)(i)|2^^ - 1)(2). (29) 
v 2 V 2 
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For separable states, on the other hand, ((AMq)^) becomes as small as ((AMq,)^) < 1/L. This is consistent with the 
fact that any separable state is a NFS. For example, li/jinit) is a separable state, for which ((AMq)^) < 1/L for all 
three directions a = x,y, z. 

C. Anomalously fluctuating states are used in Shor's algorithm 

We evaluate fluctuations of Ma and Ma"^ for all states appearing in Shor's factoring algorithm, for various values 
of N and x. We assume in this section that noises are absent, because our purpose in this section is to find out AFSs. 

FigureQlshows the change of ((AMq,)^) along the steps of the algorithm when N — 21, Li — 10, L2 — 5, x = 2, for 
which r — 6. It is seen that ((AMa)^)'s remain smaller than 1/L = 1/15 ~ 0.067 until the Hadamard transformation 
is finished. This is consistent with the fact that any separable state is a NFS (although the inverse is not necessarily 
true), because all states during the Hadamard transformation are separable states [see, e.g., Eq. ()61|l]. In the modular 
exponentiation processes, on the other hand, {{AMx)'^) grows quickly, until it becomes 0.227, which is significantly 
greater than 1/L, when the modular exponentiation is finished. During the DFT, {{AMx)'^) decreases gradually, 
whereas ((AM^)^) grows in turn until it becomes 0.109, which is significantly greater than 1/L, at the final stage of 
the DFT. 
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FIG. 1: {{AMcf) of every state appearing in Shor's factoring algorithm when TV = 21, Li = 10, L2 = 5, x = 2, for which 
r — 6. 
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To examine which register is responsible for the large fluctuations, we investigate Wa {a = x,y, z) that is defined 



Wa 



_ {{AM, 



(l)^2\ 



((AM„)2) 



((AMi^O 



(l)^2\ 



^aM^^ + ^AMi^^ 



2\ ' 



(30) 



If the first register gives dominant contribution to the fluctuation, we expect that 



Wa=^[^^] = 2.25. 



(31) 
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In Fig. 12 we plot the change of {{AMa'')'^) along the steps of the algorithm. Comparing Fig. with Fig.|21 we find 
that = 2.03 for |V'me) and = 2.05 for |i/'finai)- Since these values of Wa are close to [L/LiY , we conclude that 
i?i gives the dominant contribution. 




Step of the Algorithm 

FIG. 2: ((AA/^^^)2) of every state appearing in Shor's factoring algorithm when A'^ = 21, Li = 10, L2 = 5, x = 2, for which 
r = 6. 

In order to judge whether the states are AFSs or not, we also investigate the L dependence of the fluctuations. 
Since Ri gives dominant contributions, we calculate ((AM^^^)^) for a larger system with N = 513, Li = 20, L2 = 
10, X = 26, for which r ~ Q. Figure O plots ((AMq^'')^) in this case. By comparing this figure with Fig. [3 we find that 
((AMi^^)2) for I^me) is almost independent of Li. In fact, (i/'ME|(AMi^^)2|-0ME) is 0.460 and 0.477 in Figs. Hand 

respectively. We also find that ((AMi"^-*)^) is almost independent of Li for ji/'finai)- In fact, (V'finai|(AMi"^^)^|V'finai) is 
0.223 and 0.219 in Figs. Inland 13 respectively. On the other hand, other fluctuations have different dependences on 
Li, for example, ((AMi^^)^) for I'f/'finai) in Fig. El is nearly half of that in Fig. [3 Moreover, {{AM^^^fYs of all states 
in Fig. O are nearly half of those in Fig. |21 

From these observations, we conclude that Ii/'me) and IV'finai) are AFSs, which have anomalously large fluctuations 
of Mx and M^, respectively. Although this does not exclude the possibility that some other states could also be 
AFSs, identification of the above AFSs are sufficient for the purpose of the present paper; namely, we have confirmed 
conjecture (i) when (TV, x) = (21, 2) and (513, 26), both for which r — Q. 

We also performed numerical simulations for other values of (N^x), for which r takes various values from 2 to 20. 
We found that AFSs appear for all cases except when r becomes an integral power of 2, i.e., except when r = 2, 4, 8, 16; 
namely, we have confirmed conjecture (i) apart from the exceptional cases. Since such exceptional cases seem to be 
unimportant in quantum computation, we consider a typical case {N,x) — (21,2) in the following sections. 

D. Similarity of states with different values of L 

From Figs. 121 and 13 it is seen that states of different values of L have similar properties; namely, states in quantum 
computers are homogeneous in a broad sense, because states with a larger L (which is necessary for larger inputs) 
and states with a smaller L are both generated according to the same algorithm. This allows us to analyze the L 
dependence of the properties of quantum states in the quantum computers. 
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FIG. 3: {{AMi'^f) of every state appearing in Shor's factoring algorithm when TV = 513, Li = 20, L2 = 10, x = 26, for 
which r = 6. 

VI. MODELING AND THEORETICAL BASIS OF QUANTUM COMPUTERS SUBJECT TO NOISES 

In order to examine conjectures (ii) and (iii), we investigate in the following sections effects of weak perturbations 
from classical noises on quantum computers. In this section, we describe the modeling and theoretical basis. 

A. Model of noises 

We consider classical noises /a;, /y, /z, which act on the qubits through the following interaction Hamiltonian; 

L 

Hint= Aa5I/"(^,iKW- (32) 

a—x,y,z £—1 

Since the computational basis is taken as Eq. (|18|l . fx and fy are called "bit-flip noises" because they induce transitions 
between different basis states, whereas fz is called a "phase-shift noise" because it induces phase shifts of the basis 
states. 

In this paper, we consider long- wavelength noises, whose spectral intensities behave as Eq. 1)15(1 : namely, we take 
fa{(,t) to be independent of t. 



(33) 



For simplicity, we assume that 




/c.(i)//3(i')=</3 Ut)Ut'), 



fa{t)=0, 



(34) 
(35) 
(36) 
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which seem natural in many physical situations. Here, the overline denotes the average over the ensemble of the 
noises: 



lim -E---' (37) 



ly—l 



where ly labels realizations (1, 2, • • • , n,,) of the noises. From Eqs. (|33|l and (|34|) . the interaction reduces to the simple 
form 

iJi„tW = AL UWMc- (38) 

a—x,y,z 

To simulate some real systems H^jIUjII^, fa{t) is assumed to have the 1// spectrum [30|: 



fa(.i) = ^= cos [ut + 9a{i^)] , 



(39) 



where 0q(w) is a random phase, which distributes uniformly in (— tt, tt] for each lo, and the summation is taken over 
discrete values of lo in the interval ljiow < < t^high with separations Ao; = 27r/Ttotai- Here, cjiow and Whigh are low- 
and high-frequency cutoffs, respectively. 

In real systems, noises act continuously over the whole computational time Ttotai- However, we wish to study effects 
of noises on each state in the computation. Therefore, we assume that the computation is perfectly performed until 
the mth step, and that the noises act between the mth and (m + l)th steps. By calculating changes of the quantum 
states and of the computational results in this case, we can analyze effects of the noises on each state. 

For this purpose, we take ijJiow — Ac^; because the variation at such a low frequency is negligible during the time 
interval r of one step. Regarding Ci^high, we take Whigh — 4.1 x 27r/T, where the fractional factor 4.1 is taken in order 
to avoid possible troubles which may occur by setting Whigh as an integral multiple of 2tt/t. We have confirmed that 
effects of higher-frequency components are negligible. 



B. Fidelity and decoherence 



Before presenting results of numerical simulations in the following section, we present in this section a theoretical 
basis for analyzing the numerical results. 

As explained in Sec. Ill PI A can be interpreted as the noise amplitude times the coupling constant. We are interested 
in the case of small A, because otherwise it is obvious that the quantum computation would fail. We therefore assume 
that A is small enough so that its lowest-order contribution is dominant [see, e.g., Eq. (|41|l below]. Note, however, 
that the numerical results presented in the following section include all orders in A. Since numerical simulations are 
possible only for relatively small L, we will draw general conclusions by using complementally both the numerical 
results and the analytic results of this section. 

Suppose that the computation is perfectly performed until the mth step; namely, the state ji/'m) that is obtained 
just after the mth step is exactly the state prescribed by the algorithm. When the noises act between the mth and 
(m -I- l)th steps, the state evolves into 

lO = IV-m) + ^ f dt ffi„t(i) H^) + TT^ f dt f dt' Hint{t)Hintit'Mn) + ' ' ' ■ (40) 
Jo l*"] JO Jo 

We are interested in the density operator that is the average of |V'm)(V^ml over the ensemble of the noises. From 
Eqs. (123, (EH), and (EOl), we obtain 

pL ^ WJWJ 

= Prn - C„(t) [i'llp^ + p^Ml - 2Mo,p^p„,Mo) + O(A^). (41) 

a 

Here, pm = |V'm)('0m|, and Col(t) is an integral of the autocorrelation function of the noise, 



Ca.iT) =2 f dt f dt' Uit)Ut') ^ f dt f dt' Ja{t)U{t')=( I fa{t)dt) . (42) 

Jo Jo Jo Jo \J0 / 
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As a measure of deviation of p',, from the ideal one pm, we consider the fidehty that is defined by 

F.ra = Tr [prap'J . (43) 

This is not necessarily a good measure of decoherence, because it can be reduced even when p'^ happens to be a pure 
state. As a measure of decoherence, we consider the a entropy of a = 2, 

S,„^-ln(Tr[(p:„)2]). (44) 

To see the relation between and 5"^, let us represent Eq. l|lT|l as p'„^ = Pm + ^^Vm + 0{X^). Then we obtain 

Sm - -2A2Tr[p™r)™] + 0(A3), (45) 

Fra = 1 + A2Tr[p„r)„] + 0(A3). (46) 

We thus find 

5„ = 2(1-F,„) + 0(A3). (47) 

Therefore, to O(A^), the reduction of the fidelity is directly related to the increase of the entropy, i.e., to the decoher- 
ence. Since we are interested in the case of small A, this perturbative relation should hold. We thus simply call the 
reduction of the fidelity "decoherence" in the following discussions. 

Inserting Eq. 1)41(1 into Eq. (|43|l . we obtain a simple formula, which is correct up to O(A^), 

Fm = 1- ^ Va(T)(V'™|(AM„)2|^„), (48) 

a 

where AMa = Ma — {''pTn\Ma\ipm)- It is seen that, to O(A^), Fm decreases in proportion to and to the fluctuations 
of magnetizations, in accordance with the general result, Eq. (|10|l . It is also seen that the noises in three directions 
fx, fy, fz contribute additively to Fm. We can therefore calculate effects of fx, fy, fz independently. 
The decoherence rate (per step) r,„ of 1-0™) is given by 

r™-|^, (49) 

where the factor of 2 has been inserted for convenience. From Eqs. 147() and H48|l . we obtain a formula for r^; 



r — 



-2 



V^^^(^™|(AA#„)2|^„J, (50) 



which is correct up to O(A^). This formula is a special case of the general result of SM, Eq. (|10jl. except for the 
extra factor Ca{T)/T. The case of a = z of the above formula agrees also with the result of Ref. (g, except for the 
extra factor. The extra factor appears because the 1/f noise, Eq. lIH^ . does not satisfy the assumption of short-time 
correlation. Since the extra factor is independent of the state of the qubit system, it can be considered as a constant 
when comparing decoherence rates of different states. 



C. Fragility of anomalously fluctuating states 

When |-0m) is a NFS, {ipm\iAMa)'^\ilJm) < 0{1/L) by definition. Formula ^ then yields 

r„, < X^O{L). (51) 

Therefore, NFSs never become fragile. When \ipm) is an AFS that has been found in Sec IV CI on the other hand, 
{'ipm\{A.Ma)'^\i^m) — 0{L^) for a = X or z. If the noise component for such a is present, formula (|5n|l yields 

r™ = A20(l2), (52) 

hence the AFS becomes fragile (with 6—1). 
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These results are consistent with conjecture (ii) and with the more general results that are summarized in Sec. Ill Fl 
It is important to note the following fact, which is obtained from Eqs. (|51|) and 1)52(1 : 



(decoherence rate of fragile AFSs) 
(decoherence rate of NFSs) 



> 0{L). 



(53) 



This ratio becomes 3> 1 when i 3> 1, i.e., when the input N is huge. Therefore, the decoherence rate of the quantum 
computer is almost determined by the decoherence rates of the fragile AFSs. These points will be studied more in 
detail using numerical simulations in the following section. 

Note also that decoherence does not necessarily reduce the success probability of the computation. We will also 
study this point in the following sections. 

VII. RESULTS OF NUMERICAL SIMULATIONS WITH NOISES 

In this section, we present results of numerical simulations of Shor's factoring algorithm when noises act on a 
quantum computer. As explained in subsection IV CI we take N = 21, Li — 10, L2 = 5, x = 2, for which ?■ = 6 and 
Q = 75. 

A. Decoherence 

In Fig. ^ we show a two-dimensional plot of the fidelity versus the fluctuation of for all steps, i.e., 
{{tpm\{^Mz)'^\%pm), Fm) for all m, when only a phase-shift noise is present, i.e., when is given by Eq. whereas 
fx = fy — 0. Each point in the figure corresponds to a state appearing in the algorithm. The parameter A is taken as 
0.0015?i/T. Regarding a bit-flip noise, we show in Fig. Ela two-dimensional plot of the fidelity versus the fluctuation 
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FIG. 4: Fidelity vs {{AALf) in the presence of a phase-shift noise fz when N = 21, x — 2, and A = 0.0015/i/r. The average 
over noise realizations has been taken over 40 samples. 



of Mx when is given by Eq. (|39|l whereas fy = fz = ior X = 0.00157i/t. A similar plot (not shown) has been 
obtained if wc plot ((?/'m|(AMy)^|V'm), Fm) when fy is given by Eq. (|39|l whereas fx = fz = 0. This is reasonable 
because both and fy are bit-flip noises. 

Figures ^ and [SI show that F decreases, on an average, in proportion to the fluctuation of the normalized additive 
operator to which the noise couples via Hint {t) of Eq. H38|) . Distributions around the average curve are due to the fact 
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FIG. 5: Fidelity vs {{AMx)^) in the presence of a bit-flip noise fx when = 21, x = 2, and A = 0.0015fi/r. The average over 
noise realizations has been taken over 40 samples. 



that the number n,^ of noise samples is not very large; n^, = 40. Therefore, formula (|48|) has been confirmed. Hence, 
formulas H5U|I - H52I) have also been confirmed. 

In these figures, states with larger fluctuations arc more likely to be AFSs. In particular, the states with the largest 
fluctuations in Figs. 21 and |31 are IV'finai) and IV'me), respectively, which have been identified as AFSs in Sec. IV CI 
Although L is rather small {L — 15) in this simulation, we can extrapolate the results to the case of larger L using 
formulas H5U|I - H52|) . (See discussions in subsection IVII Dl ) It is then clear that conjecture (ii) is correct. 



B. Success probability 

Generally speaking, decoherence of a particular state does not necessarily lead to false results of the quantum 
computation. For example, as will be discussed in Sec. IVII El decoherence of I^Afinai) by the phase-shift noise fz does 
not reduce the probability of getting the correct value of r at all. Therefore, in this section we investigate effects of 
the noises on the computational result for each state. 

For this purpose, we calculate the success probability T that is defined as the probability of finding in the final 
state a basis state which gives the correct value of r. In Shor's factoring algorithm, one performs measurement, which 
diagonalize the computational basis, on the final state IV'finai)- When noises are absent, for example, we plot in Fig. 
I^lthe probability of finding each basis state in IV'finai). Each dominant peak is accompanied by side peaks, as shown 
in Fig. 13 which is a magnification of Fig. |S| If the basis state with c ~ 171 or 853 happens to be obtained, one can 
successfully obtain the correct value of r = 6, where the over line denotes the bit reversal. The other basis states do 
not give the correct value. For example, if one obtains c — 512, which corresponds to the central peak in Fig. El then 
c' satisfying inequality (|24l) is c' = 3. Since c' is not coprime to r = 6, it gives a wrong result as r = 2. Whether 
the result is correct or not can be checked efficiently using a classical computer. Furthermore, if one obtains c = 170, 
which corresponds to the highest side peak associated with the dominant peak at c = 171 in Fig. then there is no 
c' satisfying inequality (|24|l . Therefore, T is given in the case ofiV = 21, x = 2by 

r = P(T7T)-f P(853), (54) 

where P(c) denotes the probability of finding in the final state a basis state \c)^^\ 

It is essential to exclude P(c)'s of the basis states corresponding to the other peaks. In fact, we found that some 
of such excluded P(c)'s sometimes increase with increasing the strength of noises. Hence, we would have obtained 
unphysical results if we included them in the success probability. 

It is evident from Eq. (|54|) that T < 1 even in the absence of the noises. If we denote T in the absence of noises by 
Tcioan, it is evaluated for the case of Fig. (HI as Tdcan = 0.22797. When noises act on the quantum computer, T would 
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FIG. 6; Probability distribution of finding a basis state Ic)'-'^' at the end of the algorithm when A'' = 21, x = 2, and A = 0. The 
horizontal axis is the bit reversal c of c. 
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FIG. 7: A magnification of Fig. Elaround a dominant peak at c = 171. 



become smaller than T, 



clean: 



T = eT, 



clean? 



(55) 



where e < 1. For a successful quantum computation, the factor e should be kept larger than some threshold value eth 
(see Sec. IVlllAt : 



e > eth- 



(56) 
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Consider now the case where noises act only between the mth and (m+l)th steps. We denote the success probabihty 
in this case by T„. By investigating and for each to, we can study effects of the noises on the computational 
resuhs for each state \ipm)- In real situations, noises act continuously throughout all steps. Hence, the success 
probability in real situations is less than any Tm- 

T < min T^- (57) 

m 

Therefore, the following condition is necessary for a successful quantum computation: 

min > eth- (58) 

clean 



C. Relation between the success probability and decoherence 



In Figs, island El we plot the relation between the fidelity F,„ and the success probability r,„ when A = 0.0015?i/r 



for a bit-flip noise [fx ^ 0, given by Eq. JSH, whereas fy — fz = 0) and a phase-shift noise [fx 
fz ^ 0, given by Eq. respectively; namely, (F^jT^) are plotted for all m. 



fy = 0, whereas 



J2 

td 

O 



(/} 
(D 
O 
O 

CO 



0.228r 



0.227 



0.98 



0.99 

Fidelity 



FIG. 8: The success probability vs the fidelity in the presence of a bit-flip noise fx when A'' = 21, x = 2, and A = 0.0015S,/t. 
The average over noise realizations has been taken over 40 samples. 



It is seen that for most states their decoherence results in the reduction of the success probability, as might be 
expected. If we define the rate of the reduction of the success probability per decoherence by 



Tc 



lean 



l-F„ 



(59) 



then it is found that varies from state to state. 

We notice that there are exceptional states located at the top of Fig. |3 for which the phase-shift noise does not 
reduce the success probability. These are states which appear in the latter part of the DFT. This means that quantum 
coherence among basis states of these states is unnecessary for quantum computation. This may be understood 
by considering effects of the phase-shift noise on the final state IV'finai)- In order to estimate r, one will perform 
measurement on this state, which diagonalizes the computational basis. This means that one will not measure the 
relative phases among basis states. Therefore, decoherence of the relative phases in IV'finai) does not change the 
computational result at all. This point will be discussed later again in 
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FIG. 9; The success probability vs the fidelity in the presence of a phase-shift noise /z when A'^ — 21, x = 2, and A = O.OOlSft/r. 
The average over noise realizations has been taken over 40 samples. 



D. An AFS is crucial 



We now investigate differences between effects of noises on NFSs and those on AFSs. For this purpose, we investigate 
effects of noises on IV'ht), which is a typical NFS, and those on \iPme), which is a typical AFS. 

Figures ITUl and ITTI plot {Fjn,T„i) for \ipm) = IV'ht) and for \ipm) = I'/'me), respectively, for various values of A 
ranging from 0.00075ri/T to 0.006?i/T. The crosses represent the case of a bit-flip noise with fx ^ 0, given by Eq. 
(|39|l . whereas fy ^ fz ^ 0. The triangles represent the case of another bit-flip noise with fy ^ 0, given by Eq. I|39|l . 
whereas fx = fz — 0. On the other hand, the squares in the figures represent the case of a phase-shift noise with 
fz ^ 0, given by Eq. whereas fx ^ fy ~ 0- 

It is found that both Fm and T™ decrease with increasing A. As a result, {Fm,Tm) of either state composes 
a monotonic curve, although the data scatter slightly around the average curve because the average over noise 
realizations has been taken over a finite number {n^ — 200) of samples. The average curves are almost straight for 
such small A as assumed in the numerical simulations; namely, for small A, 

r„i ~ const, independent of A, for each noise and m, (60) 

where is defined by Eq. 

For |'!/'ht), the rate takes similar values for the three noises. Regarding each of F„i and T„i, on the other hand, 
the magnitudes of their reductions by fx are smaller than those by fy or fz. This may be understood by noting that 
IV'ht) can be rewritten simply as 

|V'HT) = |+x,+x,--.,+a;)(i)|l)(2), (61) 

where | + x,+x, - ■ ■ denotes the simultaneous eigenstate of axil),^x{'2), — ' 7^x{Li) with the eigenvalues 

-1-1, -1-1, • • • , +1. It is then clear that the state of Ri is not changed by fx which couples to ax{£) through the 
interaction (|^ . because fx induces only a random phase factor e*^ as \ +x, +x, • • • , +x)'-^^ e*^| +x, +x, • • • , +x)''^\ 
which means no change in the quantum state. Hence, the reductions of Fm and Tm of IV'ht) occur only through the 
decoherence of the state of i?2 , and thus the reductions become small. 

For IV'me), the reduction of Fm by fx is larger than that by fy or fz- This can be understood from Eq. H48|l : 
Through the interaction l|38|l . fx couples to Mx, which has an anomalously large fluctuation for this state, whereas 
fy and fz couple to My and Mz, respectively, which have normal fluctuations. Therefore, it is conflrmed again that 
the reduction of Fm is simply determined by the fluctuation of Ma to which the noise couples. Regarding T™, on 
the other hand, there is no significant difference between the magnitudes of the reductions by fx and Z^, whereas the 
reduction by fy is smaller. As a result, takes different values for the three noises. 
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FIG. 10: The success probability vs the fidelity of IV'ht), which is a typical NFS, for various strength of the noises fx, fy, fz 
The average over noise realizations has been taken over 200 samples. 
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FIG. 11: The success probability vs the fidelity of IV'me), which is a typical AFS, for various strength of the noises fx, fy, fz 
The average over noise realizations has been taken over 200 samples. 



It seems reasonable to assume that in real systems noises in all directions coexist with similar magnitudes, because 
noises are uncontrollable, random objects. Then, it may be tempting from Figs. ^| and to say that the effects 
on the computational result of the noises acting on IV'ht) and those acting on IV'me) would be of the same order of 
magnitudes. However, to study the performance of computations, we must consider how the effects of noises scale as 
L is increased. Although L is not so large {L = 15) in Figs. 1101 and llll it will be much larger in practical applications. 
In order to satisfy condition l|58|l for larger L, A should be made smaller. Suppose that one somehow reduces A with 
increasing L in such a way that 1 — F„i for IV'ht) is kept constant. According to Eq. (|51|l . this means the following 
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scaling rule: 

A^ocl/L. (62) 

However, according to Eq. (|52|l . 1 — F„i for IV'me) scales in this case as 1 — F,„ cx L. Then, since T„i is a monotonically 
decreasing function with decreasing Fm , as seen from Fig. ^2 and Eq. (|60|l [3]| , it is expected that is greatly 
reduced, approaching zero, with increasing L. Therefore, condition (|58|l would be violated in practical applications, 
for which L is large, if A is scaled as Eq. (|62ll . 

This argument is applicable also to other AFSs and NFSs that appear during quantum computations. Therefore, 
minTm on the left-hand side of condition (|^ is Tm of an AFS, and it is necessary that 

m 

A2<0(1/L'), (63) 

which is much severer than the naive one (|62(l . This supports conjecture (iii); namely, we conclude that the bot- 
tleneck of the quantum computations is the anomalously fast decoherence of AFSs, which appear during quantum 
computations. 

Note that inequality H63|l is not a sufficient condition, but a necessary condition. We will discuss a sufficient 
condition in Sec. IVIIII 



E. Some AFSs may be noncrucial 

We have shown that the decoherence of one of AFSs appearing in Shor's factoring algorithm is crucial, in consistency 
with conjecture (iii). Note however that this does not mean that decoherence of all AFSs appearing in the algorithm 
were crucial. 

For example, consider the final state IV'finai), which has an anomalously large fluctuation of Mz, whereas the 
fluctuations of Mj, and My take normal values. When a phase-shift noise with fzy^O,fx = fy = acts on this state, 
it evolves into 

IV'Lai) = ^ E E [^ca + ze{c,a)) \c)<^'^\x'^ mod N)^^\ (64) 

where 9{c,a) is a phase, which depends on c, a, and the noise. Since the probability P{c) of finding a base |c)^^'' does 
not depend on this random phase, for this state is not reduced at all by the phase-shift noise, whereas the fidelity 
Fm is reduced in proportion to L^. Therefore, unlike IV'me), the anomalously fast decoherence of iV'finai) is not crucial. 
Tm of this state is reduced only by fx or fy, in proportion to L. 



VIII. DISCUSSIONS 



A. A sufficient condition on A 



Inequality (|63|l is not a sufficient condition, but a necessary condition. In this section, we discuss a sufficient 
condition. 

In real situations, noises act continuously throughout the computation, as discussed in Sec. IVII Bl Hence, the 
success probability T in real situations may be given by 



T — ^clcan 



m ^clcan 

For a sufficiently small A, since Tdcan — 7m oc A'^, this may be approximated by 

^clcan -^m \ 



T ~ Tcloan exp - E ■ 
\ m 



lean 



^clcan GXp 



E O(L^) 
G crucial AFSs 



E 



(65) 



0(L) 



e noncrucial AFSs and NFSs 



(66) 
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We have already identified that IV'me) is a crucial AFS. It seems reasonable to assume that AFSs appearing before 
and after this state, having anomalously large fluctuations of M^, should also be crucial AFSs. Figures ^ - 131 suggest 
that the number of such AFSs is roughly proportional to the total number of computational steps, Q. As described 
in subsection IV Al Q = 0{Li) — 0{L'^), where n = 2 in our simulation, whereas n = 3 in an actual computation. 
Hence, for large L, we can estimate roughly as 

T ~ Telean exp [-X^O{V'+^)] . (67) 

Hence, e defined by Eq. (|55|1 is roughly given by 

e ~ exp [-A20(L"+2)] . (68) 

To get a successful result within a time of poly (log A^) — poly(_L), where poly denotes a polynomial, the lowest 
allowable value eth of e should be 

eth = l/poly(L). (69) 

Therefore, a sufficient condition would be 

^'-0(^^)^ (70) 

For any value of n, we stress that the required condition for A becomes L (^ 1) times severer due to the appearance 
of AFSs than the case where only NFSs appear during the computation, and conjecture (iii) has been confirmed. 

B. Possible meaning of the appearance of a noncrucial AFS 

It seems that macroscopic entanglement is necessary for the exponential speedup over classical computers in per- 
forming computation with huge inputs, because otherwise the quantum computation would be able to be simulated 
efficiently by classical computers. Since AFSs have macroscopic entanglement, they seem necessary for the exponential 
speedup. 

We have shown that both IV'me) and IV'finai) in Shor's factoring algorithm are AFSs. In agreement with the general 
theory of SM |^, the decoherence rates of these states become anomalously great as the number L of qubits is 
increased. However, we have also shown that the anomalously fast decoherence of |?Afinai) is not crucial, i.e., does not 
reduce the success probability, whereas that of IV'me) is crucial. This may indicate that the use of an AFS in the final 
stage would be dispensable, whereas the use of an AFS in the modular exponentiation stage would be indispensable, 
to Shor's factoring algorithm; namely, it might be possible to modify the algorithm in such a way that it does not use 
an AFS in the final stage, while keeping the number Q of computational steps as Q = poly (log A^) = poly(L). On the 
other hand, it would be impossible to modify the algorithm in such a way that it does not use an AFS in the modular 
exponentiation stage, while keeping Q = poly(log A^). This interesting point will be a subject of future studies. 

C. A possible method of fighting against anomalously fast decoherence of crucial AFSs 

If the use of an AFS in the modular exponentiation stage is indeed indispensable to Shor's algorithm, we must find 
a way of fightin g again st the anomalously fast decoherence of such crucial AFSs. A possible solution may be the use 
of EGG [T9 [ l20 l l2l l [2^ and/or a DFS jHllllli, which will be mentioned in Sec. IVIII El We here point out another 
possible solution. 

We note that, according to formula l|14|) . an AFS becomes fragile only when the spectrum density of the noise 
behaves as g{kQ) = 0{L^^^^) with S > 0. That is, when \ip) is an AFS for which {^p\AAl Ai^jV) =0(^0), and 
when the spectrum density of the noise at k = ko behaves as g{ko) = 0{L^^^^), then becomes fragile if (5 > or 
non fragile if S < 0. For example, if the physical dimension of the quantum computer is 1 cm, and if the wavelengths 
of all noises are longer than 1 cm, the spectral densities of the noises behave like Eq. (|15() . In such long- wavelength 
noises, AFSs with ko — become fragile, whereas AFSs with ko ^ lcm~^ are nonfragile. Therefore, we would be 
able to avoid anomalously-fast decoherence in such long-wavelength noises if we can improve the algorithm in such a 
way that crucial AFSs are replaced with other AFSs with ko ^ Icm^^. 

For example, we have shown that IV'me) is a crucial AFS that is fragile in a long-wavelength, bit-flip noise. In order 
to realize quantum computers with large L, one should improve the algorithm in such a way that |'0me) is replaced 
with another AFSs with kg ^ lcm~^. Since the construction of such an improved algorithm is beyond the scope of 
the present paper, we will study it elsewhere. 
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D. Possibilities of other AFSs and other noises 

As normalized additive operators, we have only examined the "magnetizations" Ma and Ma^ with a — x,y, z. This 
is sufficient for the purpose of the present paper, as explained in Sec. IV Bl However, it would be interesting to find 
out all AFSs used in the algorithm. To do this, we must study fluctuations of all normalized additive operators. A 
convenient method of doing this has recently been proposed by Sugita and Shimizu, and has been applied to quantum 
chaotic systems [l^. It would be very interesting to apply their method to quantum computers, and thereby make a 
complete list of anomalous states used in the quantum computation. 

To examine the anomalously fast decoherence of AFSs with anomalously large fluctuations of M^, we have considered 
long- wavelength noises. In real systems, it seems reasonable to assume that many different noises and/or components 
(wavelengths, frequencies, and directions) coexist. It would be necessary to examine effects of all existing noises to 
realize a quantum computer with a huge number L of qubits, because, as we have shown in this paper, for huge L 
some noises can be crucial even if its strength is much weaker than other noises. 

These points will be subjects of future studies. 

E. Uses of error correcting codes and/or a decoherence- free subspace 

We have studied Shor's factoring algorithm without ECC [ll|23,|2ll|23| or error avoiding using a DFS pll2ll25|: 
namely, we have studied "bare" characteristics of quantum computers performing Shor's algorithm. 

Regarding the use of a DFS, it will be effective for flghting against the long- wavelength noises /„ that are considered 
in this paper. However, as mentioned in the preceding section, many different noises and/or components would coexist 
in real systems. It is not clear whether a DFS can be constructed efficiently in such a realistic case, because the number 
of extra qubits that are necessary to construct a DFS is increased as the number of different noises and/or components 
is increased (2^,2^. Also, at present, we do not have definite conclusions on the efficiency of ECC in such a realistic 
case. We can, however, say that the improvement of the bare characteristics is crucial in practical applications, 
because if the bare characteristics are bad, then ECC would become much complicated and large scale. Such a 
computer system would be impractical. 

Therefore, we think that all of ECC, a DFS, and the improvement of the bare characteristics should be necessary 
to realize a quantum computer that accept huge inputs. 

F. Various definitions of decoherence 

The decoherence and decoherence rate can be defined in many different ways. The definition of Vm of the present 
paper, Eq. (|49|l . is one of many possible definitions. Fortunately, however, we are interested in the case of small A in 
this paper. In such a case, we can obtain similar conclusions for many different definitions of the decoherence rate. 
Indeed, we have shown in Sec. IVI Bl that the loss of fidelity and the increase of the a entropy agree with each other 
for small A. 

Note, however, that the situation could be different if one employed some definitions used in condensed-matter 
physics. In condensed-matter physics, decoherence is often discussed with respect to a particular quantity, such as the 
line shape 32] and a noncquilibrium noise 33] . In quantum information theory, on the other hand, the decoherence is 
usually defined with respect to all possible observable. The decoherence in the latter sense can take place without any 
change of the (expectation) value of a particular quantity. This point should be considered when using rich results of 
condensed-matter physics. 

IX. SUMMARY AND CONCLUSIONS 

With the help of the general theory of stabilities of many-body quantum states by SM la , we have studied prop- 
erties of quantum states in quantum computers that perform Shor's factoring algorithm [3]. Since the efficiency of 
computation becomes relevant only when the size N of the input is huge, we focus on asymptotic behaviors as the 
number L [= O(logiV)] of qubits is increased. 

Following the general theory by SM, we have paid attention to fluctuations of normalized additive operators, which 
are the sums of local operators, as defined by Eq. If fluctuation ('i/'|(AA)^|?/') of every normalized additive operator 
A is 0{1/L) or less for a pure state |^), we call it a normally fluctuating state (NFS). Any separable state is a NFS, 
whereas the inverse is not necessarily true. On the other hand, if there is a normalized additive operator whose 
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fluctuation is 0(i°) for a pure state \4>)^ we call \'4i) an anomalously fluctuating state (AFS). Since AFSs have such 
anomalously large fluctuations, they are entangled macroscopically. We have pointed out in Sec. Ill CI that the use 
of fluctuations of normalized additive operators as a measure of macroscopic entanglement seems natural from the 
viewpoints of many-body physics and experiments. 

By performing numerical simulations of Shor's factoring algorithm, we have found that AFSs appear during the 
computation, although the initial state is a NFS. For example, the state IV'me) just after the modular exponentiation 
process is an AFS, which has anomalously large fluctuation of M^.. Here, is the a = x component of that 
is defined by Eq. 1)27(1 . which corresponds to the magnetization of a spin system. The final state IV'finai), which is 
obtained by a discrete Fourier transform, is also an AFS, which has anomalously large fluctuation of (the a — z 
component of Ma). 

According to the general theory by SM, the asymptotic behavior, as L is increased, of the decoherence rate F of 
a quantum state is directly related to fluctuations of normalized additive operators: F of a NFS never exceeds 0{L) 
in any weak classical noises, whereas F of an AFS can be either O(L^) or less, depending on the spectral densities 
of the noises. An AFS with an anomalously great decoherence rate F = 0(L^+''), where 5 > 0, is said to be fragile. 
We have shown that AFSs which we have found in Shor's algorithm become fragile, F = 0{L^), in long-wavelength 
noises with a 1// spectrum, which simulate noises in some real systems. Therefore, for large L, the decoherence rate 
of a quantum computer performing Shor's factoring algorithm is determined by the decoherence rates of the fragile 
AFSs that appear during the computation. 

Since decoherence of particular states does not necessarily lead to false results of the quantum computation, we 
examine whether the anomalously fast decoherence of the fragile AFSs leads to anomalously large degradation of 
the result of computation. To do this, we have investigated effects of the noises on the computational results for 
each state. We have found that the anomalously fast decoherence, F — 0{L'^), of IV'me) leads to anomalously large 
reduction, approximately proportional to L^, of the success probability T, which is defined as the probability of getting 
the correct result of computation. We have concluded that the anomalously fast decoherence of such crucial AFSs 
becomes a bottleneck of quantum computers performing Shor's factoring algorithm. 

This does not however mean that all AFSs appearing in the algorithm are crucial. For example, the anomalously 
fast decoherence, F = 0{L^), of |'0finai) does not lead to large reduction of T. In this sense, IV'finai) is a noncrucial 
AFS in Shor's factoring algorithm. 

It seems that macroscopic entanglement is necessary for the exponential speedup over classical computers in per- 
forming computation with huge inputs, because otherwise the quantum computation would be able to be simulated 
efficiently by classical computers. Since AFSs have macroscopic entanglement, they seem necessary for the exponen- 
tial speedup. This does not however mean that all AFSs in an algorithm written naively are necessary. For Shor's 
factoring algorithm, our results suggest that a crucial AFS IV'me) is necessary whereas a noncrucial AFS iV'finai) may 
be able to be replaced with a NFS. In order to realize quantum computers with large L, one should improve the 
algorithm in such a way that necessary but fragile AFSs are replaced with other AFSs that are nonfragile in real 
noises. To do this, formula (|14|l will be useful, from which one can estimate F of an AFS. Since error correcting codes 
and decoherence-free subspaces are not almighty, we think that one must also utilize such optimization to realize a 
quantum computer that accepts huge inputs. 
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